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Amendments to the Claims: 

The following is a listing of the claims pending in the application: 
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1. ^Currently Amended) In a computer system, a method [for monitoring drivers,] 
comprising^: 

receiving a request from a kernel mode driver; 
determining that\the driver is to be monitored; 
re-vectoring the request to a kernel mode driver verifier; and 
taking action in the driver verifier to monitor actively test the driver for errors . 



2. (Original) The method of claim 1 wherein receiving a request from a driver 
includes receiving a function call in a kernel component of an operating system. 



3. (Original) The method of claim 1 wherein determining that the driver is to be 
monitored includes checking a registry setting. 




4. (Currently Amended) The method of clahji 1 wherein the request from the driver 
includes a memory allocation request, and wherein taking action in the driver verifier to monitor 
test the driver includes allocating memory space thereto from ^special pool of memory. 



5. (Currently Amended) The method of claim 1 wherein\the request from the driver 
includes a memory allocation request, and wherein taking action in the elriver verifier to monitor 
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test the driver includes marking memory bounding the memory space to detect improper access of 
the memory bounding the memory space. 
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6. (Currently Amended) The method of claim 1 wherein the request from the driver 
includes a memory deallocation request, and wherein taking action in the driver verifier to monitor 
test the driver includes marking deallocated memory space to detect improper access of the 
deallocated memory space. 

7. (Currently Amended) 'tht method of claim 1 wherein taking action in the driver 
verifier to monitor test the driver includesSjiaintaining allocation information in at least one data 
structure associated with the driver. 



8. (Original) The method of claim\ wherein the request from the driver includes a 
memory allocation request, and wherein maintaining allocation information includes adding data 
corresponding to the allocation request to the data stmctute. 

9. (Original) The method of claim 7 wherein the request from the driver includes a 
memory deallocation request, and wherein maintaining allocatioiWformation includes removing 
data corresponding to the allocation request from the data structures 



10. (Original) The method of claim 7 further comprising providing the allocation 
information to a user interface. 
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1 1 . "(Currently Amended) The method of claim 1 wherein taking action in the driver 
verifier to monitor test the driver includes validating call parameters. 

12. (Currently 7\mended) The method of claim 1 wherein taking action in the driver 
verifier to monitor test the driver includes checking for resources allocated to the driver at driver 
unload. 

13. (Currently Amended) Tnk method of claim 1 wherein taking action in the driver 
V verifier to monitor test the driver includes simulating a low resource condition. 



14. (Original) The method of claim 13 wherein simulating the low resource 
condition includes failing requests for memory pool\allocation. 

15. (Original) The method of claim 13 wherein simulating the low resource 
condition includes invalidating driver code and data. 

16. (Currently Amended) The method of claim 1 wherein taking action in the driver 
verifier to monitor test the driver includes checking for timers in deallocated pooled memory. 

17-26 (Canceled). 



27. (Original) A computer-readable medium having computer-executable 
instructions, comprising: \ 
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receivmg a request from a component for allocation of memory space; 
determining a location of memory space to allocate; 
restricting access to areas bounding the location; 
allocating the memory space; and 

monitoring the areas bounding the location for an access violation. 

28. (Original) Tne computer-readable medium of claim 27 having further computer- 
executable instructions, comprisingWletecting an access violation. 

29. (Original) The computer-readable medium of claim 27 having further computer- 
executable instructions, comprising 

receiving a request from the componeht for deallocation of the memory space; 
restricting access to deallocated memory\space; and 
monitoring the deallocated memory space for an access violation. 

30. (Original) The computer-readable medium of claim 29 having further computer- 
executable instructions, comprising, detecting an access violation in the deallocated memory space. 



3 1 . (Original) A computer-readable medium Ijaving computer-executable 
instructions, comprising: 

receiving a plurality of requests from a component for allocation of various distinct sets 
memory; 

allocating the memory; 
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trackingsthe space allocated to the component on each request; 

receiving Quests for deallocation of at least one of the sets of memory allocated to the 
component; 

tracking the spa^e deallocated in each received deallocation request; and 
determining from the tracking whether space remains allocated to the driver at a time when 
the driver should have no space allocated thereto. 

32. (Original) A computer-readable medium having computer-executable 
instructions, comprising: 

receiving information corresponding to a driver unload; 
determining whether resources remauj associated with the driver; 
and if so, generating an error. 

33. (Original) The computer-readabl\ medium of claim 32 wherein determining 
whether resources remain associated with the driver includes examining lists maintained by a 
system kernel 

34. (Original) The computer-readable mediunW claim 32 wherein determining 
whether resources remain associated with the driver includes maintaining information tracking 
memory allocated to the driver and deallocated thereby. 



35. (Original) A system for monitoring drivers, comprising: 

an operating system component including an interface for receiving requests from drivers; 
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a re-vecfbring component for examining the requests to determine whether requesting 
drivers are to be monitored; and 

a driver verifier component operably connected to the re-vectoring component, the driver 
verifier receiving information from the re-vectoring component for a driver that is to be monitored 
and executing at least one test to monitor the driver. 

36. (Original) The^system of claim 35 wherein the operating system component 
comprises a kernel component. 

37. (Original) The systen^of claim 35 wherein the re-vectoring component 
determines that the driver is to be monitored based on a setting in a registry. 

38. (Original) The system of claim 37 further comprising a user interface for 
writing driver information to the registry. 

39. (Original) The system of claim 35 wherein the request from the driver includes 
a memory allocation request, and wherein a test by the driver verifier includes allocating memory 
space thereto from a special pool of memory, and marking memory bounding the memory space to 
detect improper access of the memory bounding the memory spkce. 



40. (Original) The method of claim 35 wherein the request from the driver includes 
a memory deallocation request, and wherein a test by the driver verifier^cludes deallocating the 
memory space, and marking the deallocated memory space to detect improper access thereof 




In re Application of WANG 
Serial No.: 09/447,501 



41 . (Original) The system of claim 35 wherein a test by the driver verifier includes 
examining resources allocated to the driver. 

42. (Original) \The system of claim 41 wherein examining resources allocated to the 
driver includes tracking outstanding memory allocated to the driver. 

43. (Original) Thesys^em of claim 41 wherein examining resources allocated to the 
^driver includes reviewing lists maintainedyby the operating system component for information 

therein associated with the driver. 

44. (Original) The method of claim\35 wherein a test performed by the driver 
includes validating call parameters. 

45. (Original) The method of claim 35 wherein a test performed by the driver 
includes failing requests for memory pool allocation. 

46. (Original) The method of claim 35 wherein a te${ performed by the driver 
includes invalidating driver code and data. 

47. (Original) The method of claim 35 wherein a test performed by the driver 
includes checking for timers in deallocated pooled memory. 
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48. (New)\ln a computer system, a method for verifying system components, 
comprising: \ 

selecting one or mVe tests for verifying functionality of the component; 
modifying a request i&r system services to include execution of the selected tests; 
executing the modified request; and 
generating errors for any test failures. 

49. (New) The method of claim 48 wherein the component comprises a device driver. 

50. (New) The method of claim 48 ^herein the request for system services comprises a 
request to a kernel component. \ 

51. (New) The method of claim 48 further condensing applying a test condition 
designed to detect a specific error. \ 

52. (New) The method of claim 51 wherein applying tlite test condition includes 
restricting available system resources. \ 

53. A computer-readable medium having computer-executable instructions for 
performing the method of claim 48. ^ 
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